FilesExpand file tree

develop

/

macros

/

Copy path

Directory actions

More options

More options

Directory actions

More options

More options

Latest commit

 

History

History

History

 

 

develop

/

macros

/

Copy path

Top

Folders and files

Name		Name	Last commit message	Last commit date
parent directory ..
admon.yml		admon.yml
amazon_security_lake.yml		amazon_security_lake.yml
audit_searches.yml		audit_searches.yml
audittrail.yml		audittrail.yml
aws_cloudwatchlogs_eks.yml		aws_cloudwatchlogs_eks.yml
aws_config.yml		aws_config.yml
aws_description.yml		aws_description.yml
aws_ecr_users.yml		aws_ecr_users.yml
aws_s3_accesslogs.yml		aws_s3_accesslogs.yml
aws_securityhub_finding.yml		aws_securityhub_finding.yml
aws_securityhub_firehose.yml		aws_securityhub_firehose.yml
azure_audit.yml		azure_audit.yml
azuread.yml		azuread.yml
bootloader_inventory.yml		bootloader_inventory.yml
brand_abuse_dns.yml		brand_abuse_dns.yml
brand_abuse_email.yml		brand_abuse_email.yml
brand_abuse_web.yml		brand_abuse_web.yml
capi2_operational.yml		capi2_operational.yml
certificateservices_lifecycle.yml		certificateservices_lifecycle.yml
circleci.yml		circleci.yml
cisco_networks.yml		cisco_networks.yml
cloud_api_calls_from_previously_unseen_user_roles_activity_window.yml		cloud_api_calls_from_previously_unseen_user_roles_activity_window.yml
cloudtrail.yml		cloudtrail.yml
cloudwatch_eks.yml		cloudwatch_eks.yml
cloudwatch_vpc.yml		cloudwatch_vpc.yml
cloudwatchlogs_vpcflow.yml		cloudwatchlogs_vpcflow.yml
driverinventory.yml		driverinventory.yml
dynamic_dns_providers.yml		dynamic_dns_providers.yml
dynamic_dns_web_traffic.yml		dynamic_dns_web_traffic.yml
ec2_modification_api_calls.yml		ec2_modification_api_calls.yml
evilginx_phishlets_0365.yml		evilginx_phishlets_0365.yml
evilginx_phishlets_amazon.yml		evilginx_phishlets_amazon.yml
evilginx_phishlets_aws.yml		evilginx_phishlets_aws.yml
evilginx_phishlets_facebook.yml		evilginx_phishlets_facebook.yml
evilginx_phishlets_github.yml		evilginx_phishlets_github.yml
evilginx_phishlets_google.yml		evilginx_phishlets_google.yml
evilginx_phishlets_outlook.yml		evilginx_phishlets_outlook.yml
exchange.yml		exchange.yml
f5_bigip_rogue.yml		f5_bigip_rogue.yml
filter_rare_process_allow_list.yml		filter_rare_process_allow_list.yml
github.yml		github.yml
github_known_users.yml		github_known_users.yml
google_gcp_pubnet_message.yml		google_gcp_pubnet_message.yml
google_gcp_pubsub_message.yml		google_gcp_pubsub_message.yml
gsuite_calendar.yml		gsuite_calendar.yml
gsuite_drive.yml		gsuite_drive.yml
gsuite_gmail.yml		gsuite_gmail.yml
gws_login_mfa_methods.yml		gws_login_mfa_methods.yml
gws_reports_admin.yml		gws_reports_admin.yml
gws_reports_login.yml		gws_reports_login.yml
iis_get_webglobalmodule.yml		iis_get_webglobalmodule.yml
iis_operational_logs.yml		iis_operational_logs.yml
is_net_windows_file.yml		is_net_windows_file.yml
is_nirsoft_software.yml		is_nirsoft_software.yml
is_windows_system_file.yml		is_windows_system_file.yml
kube_objects_events.yml		kube_objects_events.yml
kubernetes_azure.yml		kubernetes_azure.yml
kubernetes_container_controller.yml		kubernetes_container_controller.yml
linux_hosts.yml		linux_hosts.yml
linux_shells.yml		linux_shells.yml
msexchange_management.yml		msexchange_management.yml
netbackup.yml		netbackup.yml
network_acl_events.yml		network_acl_events.yml
notable.yml		notable.yml
o365_management_activity.yml		o365_management_activity.yml
okta.yml		okta.yml
osquery.yml		osquery.yml
osquery_process.yml		osquery_process.yml
papercutng.yml		papercutng.yml
path_traversal_spl_injection.yml		path_traversal_spl_injection.yml
potential_password_in_username_false_positive_reduction.yml		potential_password_in_username_false_positive_reduction.yml
potentially_malicious_code_on_cmdline_tokenize_score.yml		potentially_malicious_code_on_cmdline_tokenize_score.yml
powershell.yml		powershell.yml
previously_seen_cloud_api_calls_per_user_role_forget_window.yml		previously_seen_cloud_api_calls_per_user_role_forget_window.yml
previously_seen_cloud_compute_creations_by_user_search_window_begin_offset.yml		previously_seen_cloud_compute_creations_by_user_search_window_begin_offset.yml
previously_seen_cloud_compute_image_search_window_begin_offset.yml		previously_seen_cloud_compute_image_search_window_begin_offset.yml
previously_seen_cloud_compute_images_forget_window.yml		previously_seen_cloud_compute_images_forget_window.yml
previously_seen_cloud_compute_instance_type_forget_window.yml		previously_seen_cloud_compute_instance_type_forget_window.yml
previously_seen_cloud_compute_instance_types_search_window_begin_offset.yml		previously_seen_cloud_compute_instance_types_search_window_begin_offset.yml
previously_seen_cloud_instance_modifications_by_user_search_window_begin_offset.yml		previously_seen_cloud_instance_modifications_by_user_search_window_begin_offset.yml
previously_seen_cloud_provisioning_activity_forget_window.yml		previously_seen_cloud_provisioning_activity_forget_window.yml
previously_seen_cloud_region_forget_window.yml		previously_seen_cloud_region_forget_window.yml
previously_seen_cloud_regions_search_window_begin_offset.yml		previously_seen_cloud_regions_search_window_begin_offset.yml
previously_seen_windows_services_forget_window.yml		previously_seen_windows_services_forget_window.yml
previously_seen_windows_services_window.yml		previously_seen_windows_services_window.yml
previously_seen_zoom_child_processes_forget_window.yml		previously_seen_zoom_child_processes_forget_window.yml
previously_seen_zoom_child_processes_window.yml		previously_seen_zoom_child_processes_window.yml
previously_unseen_cloud_provisioning_activity_window.yml		previously_unseen_cloud_provisioning_activity_window.yml
printservice.yml		printservice.yml
process_bitsadmin.yml		process_bitsadmin.yml
process_certutil.yml		process_certutil.yml
process_cmd.yml		process_cmd.yml
process_copy.yml		process_copy.yml
process_csc.yml		process_csc.yml
process_curl.yml		process_curl.yml
process_diskshadow.yml		process_diskshadow.yml
process_dllhost.yml		process_dllhost.yml
process_dsquery.yml		process_dsquery.yml
process_dxdiag.yml		process_dxdiag.yml
process_esentutl.yml		process_esentutl.yml
View all files